aws-sdk-ssoadmin 1.17.0 → 1.20.0

This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.
Files changed (7) hide show
  1. checksums.yaml +4 -4
  2. data/CHANGELOG.md +15 -0
  3. data/VERSION +1 -1
  4. data/lib/aws-sdk-ssoadmin/client.rb +238 -225
  5. data/lib/aws-sdk-ssoadmin/types.rb +251 -260
  6. data/lib/aws-sdk-ssoadmin.rb +1 -1
  7. metadata +2 -2
data/lib/aws-sdk-ssoadmin/types.rb CHANGED
@@ -10,13 +10,13 @@
10
10
  module Aws::SSOAdmin
11
11
  module Types
12
12
 
13
- # These are Amazon Web Services SSO identity store attributes that you
14
- # can configure for use in attributes-based access control (ABAC). You
15
- # can create permissions policies that determine who can access your
16
- # Amazon Web Services resources based upon the configured attribute
17
- # values. When you enable ABAC and specify `AccessControlAttributes`,
18
- # Amazon Web Services SSO passes the attribute values of the
19
- # authenticated user into IAM for use in policy evaluation.
13
+ # These are IAM Identity Center identity store attributes that you can
14
+ # configure for use in attributes-based access control (ABAC). You can
15
+ # create permissions policies that determine who can access your AWS
16
+ # resources based upon the configured attribute values. When you enable
17
+ # ABAC and specify `AccessControlAttributes`, IAM Identity Center passes
18
+ # the attribute values of the authenticated user into IAM for use in
19
+ # policy evaluation.
20
20
  #
21
21
  # @note When making an API call, you may pass AccessControlAttribute
22
22
  # data as a hash:
@@ -31,7 +31,7 @@ module Aws::SSOAdmin
31
31
  # @!attribute [rw] key
32
32
  # The name of the attribute associated with your identities in your
33
33
  # identity source. This is used to map a specified attribute in your
34
- # identity source with an attribute in Amazon Web Services SSO.
34
+ # identity source with an attribute in IAM Identity Center.
35
35
  # @return [String]
36
36
  #
37
37
  # @!attribute [rw] value
@@ -49,8 +49,8 @@ module Aws::SSOAdmin
49
49
  end
50
50
 
51
51
  # The value used for mapping a specified attribute to an identity
52
- # source. For more information, see [Attribute mappings][1] in the
53
- # Amazon Web Services Single Sign-On User Guide.
52
+ # source. For more information, see [Attribute mappings][1] in the *IAM
53
+ # Identity Center User Guide*.
54
54
  #
55
55
  #
56
56
  #
@@ -64,8 +64,8 @@ module Aws::SSOAdmin
64
64
  # }
65
65
  #
66
66
  # @!attribute [rw] source
67
- # The identity source to use when mapping a specified attribute to
68
- # Amazon Web Services SSO.
67
+ # The identity source to use when mapping a specified attribute to IAM
68
+ # Identity Center.
69
69
  # @return [Array<String>]
70
70
  #
71
71
  # @see http://docs.aws.amazon.com/goto/WebAPI/sso-admin-2020-07-20/AccessControlAttributeValue AWS API Documentation
@@ -90,22 +90,22 @@ module Aws::SSOAdmin
90
90
  end
91
91
 
92
92
  # The assignment that indicates a principal's limited access to a
93
- # specified Amazon Web Services account with a specified permission set.
93
+ # specified AWS account with a specified permission set.
94
94
  #
95
95
  # <note markdown="1"> The term *principal* here refers to a user or group that is defined in
96
- # Amazon Web Services SSO.
96
+ # IAM Identity Center.
97
97
  #
98
98
  # </note>
99
99
  #
100
100
  # @!attribute [rw] account_id
101
- # The identifier of the Amazon Web Services account.
101
+ # The identifier of the AWS account.
102
102
  # @return [String]
103
103
  #
104
104
  # @!attribute [rw] permission_set_arn
105
105
  # The ARN of the permission set. For more information about ARNs, see
106
- # [Amazon Resource Names (ARNs) and Amazon Web Services Service
106
+ # [Amazon Resource Names (ARNs) and AWS Service
107
107
  # Namespaces](/general/latest/gr/aws-arns-and-namespaces.html) in the
108
- # *Amazon Web Services General Reference*.
108
+ # *AWS General Reference*.
109
109
  # @return [String]
110
110
  #
111
111
  # @!attribute [rw] principal_type
@@ -113,11 +113,11 @@ module Aws::SSOAdmin
113
113
  # @return [String]
114
114
  #
115
115
  # @!attribute [rw] principal_id
116
- # An identifier for an object in Amazon Web Services SSO, such as a
117
- # user or group. PrincipalIds are GUIDs (For example,
116
+ # An identifier for an object in IAM Identity Center, such as a user
117
+ # or group. PrincipalIds are GUIDs (For example,
118
118
  # f81d4fae-7dec-11d0-a765-00a0c91e6bf6). For more information about
119
- # PrincipalIds in Amazon Web Services SSO, see the [Amazon Web
120
- # Services SSO Identity Store API
119
+ # PrincipalIds in IAM Identity Center, see the [IAM Identity Center
120
+ # Identity Store API
121
121
  # Reference](/singlesignon/latest/IdentityStoreAPIReference/welcome.html).
122
122
  # @return [String]
123
123
  #
@@ -150,8 +150,8 @@ module Aws::SSOAdmin
150
150
  # @return [String]
151
151
  #
152
152
  # @!attribute [rw] target_id
153
- # TargetID is an Amazon Web Services account identifier, typically a
154
- # 10-12 digit string (For example, 123456789012).
153
+ # TargetID is an AWS account identifier, typically a 10-12 digit
154
+ # string (For example, 123456789012).
155
155
  # @return [String]
156
156
  #
157
157
  # @!attribute [rw] target_type
@@ -160,9 +160,9 @@ module Aws::SSOAdmin
160
160
  #
161
161
  # @!attribute [rw] permission_set_arn
162
162
  # The ARN of the permission set. For more information about ARNs, see
163
- # [Amazon Resource Names (ARNs) and Amazon Web Services Service
163
+ # [Amazon Resource Names (ARNs) and AWS Service
164
164
  # Namespaces](/general/latest/gr/aws-arns-and-namespaces.html) in the
165
- # *Amazon Web Services General Reference*.
165
+ # *AWS General Reference*.
166
166
  # @return [String]
167
167
  #
168
168
  # @!attribute [rw] principal_type
@@ -170,11 +170,11 @@ module Aws::SSOAdmin
170
170
  # @return [String]
171
171
  #
172
172
  # @!attribute [rw] principal_id
173
- # An identifier for an object in Amazon Web Services SSO, such as a
174
- # user or group. PrincipalIds are GUIDs (For example,
173
+ # An identifier for an object in IAM Identity Center, such as a user
174
+ # or group. PrincipalIds are GUIDs (For example,
175
175
  # f81d4fae-7dec-11d0-a765-00a0c91e6bf6). For more information about
176
- # PrincipalIds in Amazon Web Services SSO, see the [Amazon Web
177
- # Services SSO Identity Store API
176
+ # PrincipalIds in IAM Identity Center, see the [IAM Identity Center
177
+ # Identity Store API
178
178
  # Reference](/singlesignon/latest/IdentityStoreAPIReference/welcome.html).
179
179
  # @return [String]
180
180
  #
@@ -236,8 +236,8 @@ module Aws::SSOAdmin
236
236
  # }
237
237
  #
238
238
  # @!attribute [rw] instance_arn
239
- # The ARN of the SSO instance under which the operation will be
240
- # executed.
239
+ # The ARN of the IAM Identity Center instance under which the
240
+ # operation will be executed.
241
241
  # @return [String]
242
242
  #
243
243
  # @!attribute [rw] permission_set_arn
@@ -245,10 +245,9 @@ module Aws::SSOAdmin
245
245
  # @return [String]
246
246
  #
247
247
  # @!attribute [rw] customer_managed_policy_reference
248
- # Specifies the name and path of the IAM customer managed policy. You
249
- # must have an IAM policy that matches the name and path in each
250
- # Amazon Web Services account where you want to deploy your permission
251
- # set.
248
+ # Specifies the name and path of a customer managed policy. You must
249
+ # have an IAM policy that matches the name and path in each AWS
250
+ # account where you want to deploy your permission set.
252
251
  # @return [Types::CustomerManagedPolicyReference]
253
252
  #
254
253
  # @see http://docs.aws.amazon.com/goto/WebAPI/sso-admin-2020-07-20/AttachCustomerManagedPolicyReferenceToPermissionSetRequest AWS API Documentation
@@ -275,11 +274,11 @@ module Aws::SSOAdmin
275
274
  # }
276
275
  #
277
276
  # @!attribute [rw] instance_arn
278
- # The ARN of the SSO instance under which the operation will be
279
- # executed. For more information about ARNs, see [Amazon Resource
280
- # Names (ARNs) and Amazon Web Services Service
277
+ # The ARN of the IAM Identity Center instance under which the
278
+ # operation will be executed. For more information about ARNs, see
279
+ # [Amazon Resource Names (ARNs) and AWS Service
281
280
  # Namespaces](/general/latest/gr/aws-arns-and-namespaces.html) in the
282
- # *Amazon Web Services General Reference*.
281
+ # *AWS General Reference*.
283
282
  # @return [String]
284
283
  #
285
284
  # @!attribute [rw] permission_set_arn
@@ -288,8 +287,7 @@ module Aws::SSOAdmin
288
287
  # @return [String]
289
288
  #
290
289
  # @!attribute [rw] managed_policy_arn
291
- # The Amazon Web Services managed policy ARN to be attached to a
292
- # permission set.
290
+ # The AWS managed policy ARN to be attached to a permission set.
293
291
  # @return [String]
294
292
  #
295
293
  # @see http://docs.aws.amazon.com/goto/WebAPI/sso-admin-2020-07-20/AttachManagedPolicyToPermissionSetRequest AWS API Documentation
@@ -306,19 +304,17 @@ module Aws::SSOAdmin
306
304
  #
307
305
  class AttachManagedPolicyToPermissionSetResponse < Aws::EmptyStructure; end
308
306
 
309
- # A structure that stores the details of the Amazon Web Services managed
310
- # IAM policy.
307
+ # A structure that stores the details of the AWS managed policy.
311
308
  #
312
309
  # @!attribute [rw] name
313
- # The name of the Amazon Web Services managed IAM policy.
310
+ # The name of the AWS managed policy.
314
311
  # @return [String]
315
312
  #
316
313
  # @!attribute [rw] arn
317
- # The ARN of the Amazon Web Services managed IAM policy. For more
318
- # information about ARNs, see [Amazon Resource Names (ARNs) and Amazon
319
- # Web Services Service
314
+ # The ARN of the AWS managed policy. For more information about ARNs,
315
+ # see [Amazon Resource Names (ARNs) and AWS Service
320
316
  # Namespaces](/general/latest/gr/aws-arns-and-namespaces.html) in the
321
- # *Amazon Web Services General Reference*.
317
+ # *AWS General Reference*.
322
318
  # @return [String]
323
319
  #
324
320
  # @see http://docs.aws.amazon.com/goto/WebAPI/sso-admin-2020-07-20/AttachedManagedPolicy AWS API Documentation
@@ -360,16 +356,16 @@ module Aws::SSOAdmin
360
356
  # }
361
357
  #
362
358
  # @!attribute [rw] instance_arn
363
- # The ARN of the SSO instance under which the operation will be
364
- # executed. For more information about ARNs, see [Amazon Resource
365
- # Names (ARNs) and Amazon Web Services Service
359
+ # The ARN of the IAM Identity Center instance under which the
360
+ # operation will be executed. For more information about ARNs, see
361
+ # [Amazon Resource Names (ARNs) and AWS Service
366
362
  # Namespaces](/general/latest/gr/aws-arns-and-namespaces.html) in the
367
- # *Amazon Web Services General Reference*.
363
+ # *AWS General Reference*.
368
364
  # @return [String]
369
365
  #
370
366
  # @!attribute [rw] target_id
371
- # TargetID is an Amazon Web Services account identifier, typically a
372
- # 10-12 digit string (For example, 123456789012).
367
+ # TargetID is an AWS account identifier, typically a 10-12 digit
368
+ # string (For example, 123456789012).
373
369
  # @return [String]
374
370
  #
375
371
  # @!attribute [rw] target_type
@@ -386,11 +382,11 @@ module Aws::SSOAdmin
386
382
  # @return [String]
387
383
  #
388
384
  # @!attribute [rw] principal_id
389
- # An identifier for an object in Amazon Web Services SSO, such as a
390
- # user or group. PrincipalIds are GUIDs (For example,
385
+ # An identifier for an object in IAM Identity Center, such as a user
386
+ # or group. PrincipalIds are GUIDs (For example,
391
387
  # f81d4fae-7dec-11d0-a765-00a0c91e6bf6). For more information about
392
- # PrincipalIds in Amazon Web Services SSO, see the [Amazon Web
393
- # Services SSO Identity Store API
388
+ # PrincipalIds in IAM Identity Center, see the [IAM Identity Center
389
+ # Identity Store API
394
390
  # Reference](/singlesignon/latest/IdentityStoreAPIReference/welcome.html).
395
391
  # @return [String]
396
392
  #
@@ -437,19 +433,19 @@ module Aws::SSOAdmin
437
433
  # }
438
434
  #
439
435
  # @!attribute [rw] instance_arn
440
- # The ARN of the SSO instance under which the operation will be
441
- # executed.
436
+ # The ARN of the IAM Identity Center instance under which the
437
+ # operation will be executed.
442
438
  # @return [String]
443
439
  #
444
440
  # @!attribute [rw] instance_access_control_attribute_configuration
445
- # Specifies the Amazon Web Services SSO identity store attributes to
446
- # add to your ABAC configuration. When using an external identity
447
- # provider as an identity source, you can pass attributes through the
448
- # SAML assertion. Doing so provides an alternative to configuring
449
- # attributes from the Amazon Web Services SSO identity store. If a
450
- # SAML assertion passes any of these attributes, Amazon Web Services
451
- # SSO will replace the attribute value with the value from the Amazon
452
- # Web Services SSO identity store.
441
+ # Specifies the IAM Identity Center identity store attributes to add
442
+ # to your ABAC configuration. When using an external identity provider
443
+ # as an identity source, you can pass attributes through the SAML
444
+ # assertion. Doing so provides an alternative to configuring
445
+ # attributes from the IAM Identity Center identity store. If a SAML
446
+ # assertion passes any of these attributes, IAM Identity Center will
447
+ # replace the attribute value with the value from the IAM Identity
448
+ # Center identity store.
453
449
  # @return [Types::InstanceAccessControlAttributeConfiguration]
454
450
  #
455
451
  # @see http://docs.aws.amazon.com/goto/WebAPI/sso-admin-2020-07-20/CreateInstanceAccessControlAttributeConfigurationRequest AWS API Documentation
@@ -491,11 +487,11 @@ module Aws::SSOAdmin
491
487
  # @return [String]
492
488
  #
493
489
  # @!attribute [rw] instance_arn
494
- # The ARN of the SSO instance under which the operation will be
495
- # executed. For more information about ARNs, see [Amazon Resource
496
- # Names (ARNs) and Amazon Web Services Service
490
+ # The ARN of the IAM Identity Center instance under which the
491
+ # operation will be executed. For more information about ARNs, see
492
+ # [Amazon Resource Names (ARNs) and AWS Service
497
493
  # Namespaces](/general/latest/gr/aws-arns-and-namespaces.html) in the
498
- # *Amazon Web Services General Reference*.
494
+ # *AWS General Reference*.
499
495
  # @return [String]
500
496
  #
501
497
  # @!attribute [rw] session_duration
@@ -526,7 +522,7 @@ module Aws::SSOAdmin
526
522
  end
527
523
 
528
524
  # @!attribute [rw] permission_set
529
- # Defines the level of access on an Amazon Web Services account.
525
+ # Defines the level of access on an AWS account.
530
526
  # @return [Types::PermissionSet]
531
527
  #
532
528
  # @see http://docs.aws.amazon.com/goto/WebAPI/sso-admin-2020-07-20/CreatePermissionSetResponse AWS API Documentation
@@ -537,9 +533,9 @@ module Aws::SSOAdmin
537
533
  include Aws::Structure
538
534
  end
539
535
 
540
- # Specifies the name and path of the IAM customer managed policy. You
541
- # must have an IAM policy that matches the name and path in each Amazon
542
- # Web Services account where you want to deploy your permission set.
536
+ # Specifies the name and path of a customer managed policy. You must
537
+ # have an IAM policy that matches the name and path in each AWS account
538
+ # where you want to deploy your permission set.
543
539
  #
544
540
  # @note When making an API call, you may pass CustomerManagedPolicyReference
545
541
  # data as a hash:
@@ -550,13 +546,15 @@ module Aws::SSOAdmin
550
546
  # }
551
547
  #
552
548
  # @!attribute [rw] name
553
- # The name of the policy document.
549
+ # The name of the IAM policy that you have configured in each account
550
+ # where you want to deploy your permission set.
554
551
  # @return [String]
555
552
  #
556
553
  # @!attribute [rw] path
557
- # The path for the policy. The default is `/`. For more information,
558
- # see [Friendly names and paths][1] in the Identity and Access
559
- # Management user guide.
554
+ # The path to the IAM policy that you have configured in each account
555
+ # where you want to deploy your permission set. The default is `/`.
556
+ # For more information, see [Friendly names and paths][1] in the *IAM
557
+ # User Guide*.
560
558
  #
561
559
  #
562
560
  #
@@ -585,16 +583,16 @@ module Aws::SSOAdmin
585
583
  # }
586
584
  #
587
585
  # @!attribute [rw] instance_arn
588
- # The ARN of the SSO instance under which the operation will be
589
- # executed. For more information about ARNs, see [Amazon Resource
590
- # Names (ARNs) and Amazon Web Services Service
586
+ # The ARN of the IAM Identity Center instance under which the
587
+ # operation will be executed. For more information about ARNs, see
588
+ # [Amazon Resource Names (ARNs) and AWS Service
591
589
  # Namespaces](/general/latest/gr/aws-arns-and-namespaces.html) in the
592
- # *Amazon Web Services General Reference*.
590
+ # *AWS General Reference*.
593
591
  # @return [String]
594
592
  #
595
593
  # @!attribute [rw] target_id
596
- # TargetID is an Amazon Web Services account identifier, typically a
597
- # 10-12 digit string (For example, 123456789012).
594
+ # TargetID is an AWS account identifier, typically a 10-12 digit
595
+ # string (For example, 123456789012).
598
596
  # @return [String]
599
597
  #
600
598
  # @!attribute [rw] target_type
@@ -610,11 +608,11 @@ module Aws::SSOAdmin
610
608
  # @return [String]
611
609
  #
612
610
  # @!attribute [rw] principal_id
613
- # An identifier for an object in Amazon Web Services SSO, such as a
614
- # user or group. PrincipalIds are GUIDs (For example,
611
+ # An identifier for an object in IAM Identity Center, such as a user
612
+ # or group. PrincipalIds are GUIDs (For example,
615
613
  # f81d4fae-7dec-11d0-a765-00a0c91e6bf6). For more information about
616
- # PrincipalIds in Amazon Web Services SSO, see the [Amazon Web
617
- # Services SSO Identity Store API
614
+ # PrincipalIds in IAM Identity Center, see the [IAM Identity Center
615
+ # Identity Store API
618
616
  # Reference](/singlesignon/latest/IdentityStoreAPIReference/welcome.html).
619
617
  # @return [String]
620
618
  #
@@ -652,11 +650,11 @@ module Aws::SSOAdmin
652
650
  # }
653
651
  #
654
652
  # @!attribute [rw] instance_arn
655
- # The ARN of the SSO instance under which the operation will be
656
- # executed. For more information about ARNs, see [Amazon Resource
657
- # Names (ARNs) and Amazon Web Services Service
653
+ # The ARN of the IAM Identity Center instance under which the
654
+ # operation will be executed. For more information about ARNs, see
655
+ # [Amazon Resource Names (ARNs) and AWS Service
658
656
  # Namespaces](/general/latest/gr/aws-arns-and-namespaces.html) in the
659
- # *Amazon Web Services General Reference*.
657
+ # *AWS General Reference*.
660
658
  # @return [String]
661
659
  #
662
660
  # @!attribute [rw] permission_set_arn
@@ -684,8 +682,8 @@ module Aws::SSOAdmin
684
682
  # }
685
683
  #
686
684
  # @!attribute [rw] instance_arn
687
- # The ARN of the SSO instance under which the operation will be
688
- # executed.
685
+ # The ARN of the IAM Identity Center instance under which the
686
+ # operation will be executed.
689
687
  # @return [String]
690
688
  #
691
689
  # @see http://docs.aws.amazon.com/goto/WebAPI/sso-admin-2020-07-20/DeleteInstanceAccessControlAttributeConfigurationRequest AWS API Documentation
@@ -709,11 +707,11 @@ module Aws::SSOAdmin
709
707
  # }
710
708
  #
711
709
  # @!attribute [rw] instance_arn
712
- # The ARN of the SSO instance under which the operation will be
713
- # executed. For more information about ARNs, see [Amazon Resource
714
- # Names (ARNs) and Amazon Web Services Service
710
+ # The ARN of the IAM Identity Center instance under which the
711
+ # operation will be executed. For more information about ARNs, see
712
+ # [Amazon Resource Names (ARNs) and AWS Service
715
713
  # Namespaces](/general/latest/gr/aws-arns-and-namespaces.html) in the
716
- # *Amazon Web Services General Reference*.
714
+ # *AWS General Reference*.
717
715
  # @return [String]
718
716
  #
719
717
  # @!attribute [rw] permission_set_arn
@@ -742,8 +740,8 @@ module Aws::SSOAdmin
742
740
  # }
743
741
  #
744
742
  # @!attribute [rw] instance_arn
745
- # The ARN of the SSO instance under which the operation will be
746
- # executed.
743
+ # The ARN of the IAM Identity Center instance under which the
744
+ # operation will be executed.
747
745
  # @return [String]
748
746
  #
749
747
  # @!attribute [rw] permission_set_arn
@@ -772,11 +770,11 @@ module Aws::SSOAdmin
772
770
  # }
773
771
  #
774
772
  # @!attribute [rw] instance_arn
775
- # The ARN of the SSO instance under which the operation will be
776
- # executed. For more information about ARNs, see [Amazon Resource
777
- # Names (ARNs) and Amazon Web Services Service
773
+ # The ARN of the IAM Identity Center instance under which the
774
+ # operation will be executed. For more information about ARNs, see
775
+ # [Amazon Resource Names (ARNs) and AWS Service
778
776
  # Namespaces](/general/latest/gr/aws-arns-and-namespaces.html) in the
779
- # *Amazon Web Services General Reference*.
777
+ # *AWS General Reference*.
780
778
  # @return [String]
781
779
  #
782
780
  # @!attribute [rw] account_assignment_creation_request_id
@@ -813,11 +811,11 @@ module Aws::SSOAdmin
813
811
  # }
814
812
  #
815
813
  # @!attribute [rw] instance_arn
816
- # The ARN of the SSO instance under which the operation will be
817
- # executed. For more information about ARNs, see [Amazon Resource
818
- # Names (ARNs) and Amazon Web Services Service
814
+ # The ARN of the IAM Identity Center instance under which the
815
+ # operation will be executed. For more information about ARNs, see
816
+ # [Amazon Resource Names (ARNs) and AWS Service
819
817
  # Namespaces](/general/latest/gr/aws-arns-and-namespaces.html) in the
820
- # *Amazon Web Services General Reference*.
818
+ # *AWS General Reference*.
821
819
  # @return [String]
822
820
  #
823
821
  # @!attribute [rw] account_assignment_deletion_request_id
@@ -853,8 +851,8 @@ module Aws::SSOAdmin
853
851
  # }
854
852
  #
855
853
  # @!attribute [rw] instance_arn
856
- # The ARN of the SSO instance under which the operation will be
857
- # executed.
854
+ # The ARN of the IAM Identity Center instance under which the
855
+ # operation will be executed.
858
856
  # @return [String]
859
857
  #
860
858
  # @see http://docs.aws.amazon.com/goto/WebAPI/sso-admin-2020-07-20/DescribeInstanceAccessControlAttributeConfigurationRequest AWS API Documentation
@@ -875,8 +873,8 @@ module Aws::SSOAdmin
875
873
  # @return [String]
876
874
  #
877
875
  # @!attribute [rw] instance_access_control_attribute_configuration
878
- # Gets the list of Amazon Web Services SSO identity store attributes
879
- # that have been added to your ABAC configuration.
876
+ # Gets the list of IAM Identity Center identity store attributes that
877
+ # have been added to your ABAC configuration.
880
878
  # @return [Types::InstanceAccessControlAttributeConfiguration]
881
879
  #
882
880
  # @see http://docs.aws.amazon.com/goto/WebAPI/sso-admin-2020-07-20/DescribeInstanceAccessControlAttributeConfigurationResponse AWS API Documentation
@@ -898,11 +896,11 @@ module Aws::SSOAdmin
898
896
  # }
899
897
  #
900
898
  # @!attribute [rw] instance_arn
901
- # The ARN of the SSO instance under which the operation will be
902
- # executed. For more information about ARNs, see [Amazon Resource
903
- # Names (ARNs) and Amazon Web Services Service
899
+ # The ARN of the IAM Identity Center instance under which the
900
+ # operation will be executed. For more information about ARNs, see
901
+ # [Amazon Resource Names (ARNs) and AWS Service
904
902
  # Namespaces](/general/latest/gr/aws-arns-and-namespaces.html) in the
905
- # *Amazon Web Services General Reference*.
903
+ # *AWS General Reference*.
906
904
  # @return [String]
907
905
  #
908
906
  # @!attribute [rw] provision_permission_set_request_id
@@ -940,11 +938,11 @@ module Aws::SSOAdmin
940
938
  # }
941
939
  #
942
940
  # @!attribute [rw] instance_arn
943
- # The ARN of the SSO instance under which the operation will be
944
- # executed. For more information about ARNs, see [Amazon Resource
945
- # Names (ARNs) and Amazon Web Services Service
941
+ # The ARN of the IAM Identity Center instance under which the
942
+ # operation will be executed. For more information about ARNs, see
943
+ # [Amazon Resource Names (ARNs) and AWS Service
946
944
  # Namespaces](/general/latest/gr/aws-arns-and-namespaces.html) in the
947
- # *Amazon Web Services General Reference*.
945
+ # *AWS General Reference*.
948
946
  # @return [String]
949
947
  #
950
948
  # @!attribute [rw] permission_set_arn
@@ -961,7 +959,7 @@ module Aws::SSOAdmin
961
959
  end
962
960
 
963
961
  # @!attribute [rw] permission_set
964
- # Describes the level of access on an Amazon Web Services account.
962
+ # Describes the level of access on an AWS account.
965
963
  # @return [Types::PermissionSet]
966
964
  #
967
965
  # @see http://docs.aws.amazon.com/goto/WebAPI/sso-admin-2020-07-20/DescribePermissionSetResponse AWS API Documentation
@@ -985,8 +983,8 @@ module Aws::SSOAdmin
985
983
  # }
986
984
  #
987
985
  # @!attribute [rw] instance_arn
988
- # The ARN of the SSO instance under which the operation will be
989
- # executed.
986
+ # The ARN of the IAM Identity Center instance under which the
987
+ # operation will be executed.
990
988
  # @return [String]
991
989
  #
992
990
  # @!attribute [rw] permission_set_arn
@@ -994,10 +992,9 @@ module Aws::SSOAdmin
994
992
  # @return [String]
995
993
  #
996
994
  # @!attribute [rw] customer_managed_policy_reference
997
- # Specifies the name and path of the IAM customer managed policy. You
998
- # must have an IAM policy that matches the name and path in each
999
- # Amazon Web Services account where you want to deploy your permission
1000
- # set.
995
+ # Specifies the name and path of a customer managed policy. You must
996
+ # have an IAM policy that matches the name and path in each AWS
997
+ # account where you want to deploy your permission set.
1001
998
  # @return [Types::CustomerManagedPolicyReference]
1002
999
  #
1003
1000
  # @see http://docs.aws.amazon.com/goto/WebAPI/sso-admin-2020-07-20/DetachCustomerManagedPolicyReferenceFromPermissionSetRequest AWS API Documentation
@@ -1024,11 +1021,11 @@ module Aws::SSOAdmin
1024
1021
  # }
1025
1022
  #
1026
1023
  # @!attribute [rw] instance_arn
1027
- # The ARN of the SSO instance under which the operation will be
1028
- # executed. For more information about ARNs, see [Amazon Resource
1029
- # Names (ARNs) and Amazon Web Services Service
1024
+ # The ARN of the IAM Identity Center instance under which the
1025
+ # operation will be executed. For more information about ARNs, see
1026
+ # [Amazon Resource Names (ARNs) and AWS Service
1030
1027
  # Namespaces](/general/latest/gr/aws-arns-and-namespaces.html) in the
1031
- # *Amazon Web Services General Reference*.
1028
+ # *AWS General Reference*.
1032
1029
  # @return [String]
1033
1030
  #
1034
1031
  # @!attribute [rw] permission_set_arn
@@ -1037,8 +1034,7 @@ module Aws::SSOAdmin
1037
1034
  # @return [String]
1038
1035
  #
1039
1036
  # @!attribute [rw] managed_policy_arn
1040
- # The Amazon Web Services managed policy ARN to be detached from a
1041
- # permission set.
1037
+ # The AWS managed policy ARN to be detached from a permission set.
1042
1038
  # @return [String]
1043
1039
  #
1044
1040
  # @see http://docs.aws.amazon.com/goto/WebAPI/sso-admin-2020-07-20/DetachManagedPolicyFromPermissionSetRequest AWS API Documentation
@@ -1064,11 +1060,11 @@ module Aws::SSOAdmin
1064
1060
  # }
1065
1061
  #
1066
1062
  # @!attribute [rw] instance_arn
1067
- # The ARN of the SSO instance under which the operation will be
1068
- # executed. For more information about ARNs, see [Amazon Resource
1069
- # Names (ARNs) and Amazon Web Services Service
1063
+ # The ARN of the IAM Identity Center instance under which the
1064
+ # operation will be executed. For more information about ARNs, see
1065
+ # [Amazon Resource Names (ARNs) and AWS Service
1070
1066
  # Namespaces](/general/latest/gr/aws-arns-and-namespaces.html) in the
1071
- # *Amazon Web Services General Reference*.
1067
+ # *AWS General Reference*.
1072
1068
  # @return [String]
1073
1069
  #
1074
1070
  # @!attribute [rw] permission_set_arn
@@ -1085,7 +1081,7 @@ module Aws::SSOAdmin
1085
1081
  end
1086
1082
 
1087
1083
  # @!attribute [rw] inline_policy
1088
- # The IAM inline policy that is attached to the permission set.
1084
+ # The inline policy that is attached to the permission set.
1089
1085
  # @return [String]
1090
1086
  #
1091
1087
  # @see http://docs.aws.amazon.com/goto/WebAPI/sso-admin-2020-07-20/GetInlinePolicyForPermissionSetResponse AWS API Documentation
@@ -1105,8 +1101,8 @@ module Aws::SSOAdmin
1105
1101
  # }
1106
1102
  #
1107
1103
  # @!attribute [rw] instance_arn
1108
- # The ARN of the SSO instance under which the operation will be
1109
- # executed.
1104
+ # The ARN of the IAM Identity Center instance under which the
1105
+ # operation will be executed.
1110
1106
  # @return [String]
1111
1107
  #
1112
1108
  # @!attribute [rw] permission_set_arn
@@ -1153,7 +1149,7 @@ module Aws::SSOAdmin
1153
1149
  #
1154
1150
  # @!attribute [rw] access_control_attributes
1155
1151
  # Lists the attributes that are configured for ABAC in the specified
1156
- # Amazon Web Services SSO instance.
1152
+ # IAM Identity Center instance.
1157
1153
  # @return [Array<Types::AccessControlAttribute>]
1158
1154
  #
1159
1155
  # @see http://docs.aws.amazon.com/goto/WebAPI/sso-admin-2020-07-20/InstanceAccessControlAttributeConfiguration AWS API Documentation
@@ -1164,19 +1160,19 @@ module Aws::SSOAdmin
1164
1160
  include Aws::Structure
1165
1161
  end
1166
1162
 
1167
- # Provides information about the SSO instance.
1163
+ # Provides information about the IAM Identity Center instance.
1168
1164
  #
1169
1165
  # @!attribute [rw] instance_arn
1170
- # The ARN of the SSO instance under which the operation will be
1171
- # executed. For more information about ARNs, see [Amazon Resource
1172
- # Names (ARNs) and Amazon Web Services Service
1166
+ # The ARN of the IAM Identity Center instance under which the
1167
+ # operation will be executed. For more information about ARNs, see
1168
+ # [Amazon Resource Names (ARNs) and AWS Service
1173
1169
  # Namespaces](/general/latest/gr/aws-arns-and-namespaces.html) in the
1174
- # *Amazon Web Services General Reference*.
1170
+ # *AWS General Reference*.
1175
1171
  # @return [String]
1176
1172
  #
1177
1173
  # @!attribute [rw] identity_store_id
1178
- # The identifier of the identity store that is connected to the SSO
1179
- # instance.
1174
+ # The identifier of the identity store that is connected to the IAM
1175
+ # Identity Center instance.
1180
1176
  # @return [String]
1181
1177
  #
1182
1178
  # @see http://docs.aws.amazon.com/goto/WebAPI/sso-admin-2020-07-20/InstanceMetadata AWS API Documentation
@@ -1215,11 +1211,11 @@ module Aws::SSOAdmin
1215
1211
  # }
1216
1212
  #
1217
1213
  # @!attribute [rw] instance_arn
1218
- # The ARN of the SSO instance under which the operation will be
1219
- # executed. For more information about ARNs, see [Amazon Resource
1220
- # Names (ARNs) and Amazon Web Services Service
1214
+ # The ARN of the IAM Identity Center instance under which the
1215
+ # operation will be executed. For more information about ARNs, see
1216
+ # [Amazon Resource Names (ARNs) and AWS Service
1221
1217
  # Namespaces](/general/latest/gr/aws-arns-and-namespaces.html) in the
1222
- # *Amazon Web Services General Reference*.
1218
+ # *AWS General Reference*.
1223
1219
  # @return [String]
1224
1220
  #
1225
1221
  # @!attribute [rw] max_results
@@ -1277,11 +1273,11 @@ module Aws::SSOAdmin
1277
1273
  # }
1278
1274
  #
1279
1275
  # @!attribute [rw] instance_arn
1280
- # The ARN of the SSO instance under which the operation will be
1281
- # executed. For more information about ARNs, see [Amazon Resource
1282
- # Names (ARNs) and Amazon Web Services Service
1276
+ # The ARN of the IAM Identity Center instance under which the
1277
+ # operation will be executed. For more information about ARNs, see
1278
+ # [Amazon Resource Names (ARNs) and AWS Service
1283
1279
  # Namespaces](/general/latest/gr/aws-arns-and-namespaces.html) in the
1284
- # *Amazon Web Services General Reference*.
1280
+ # *AWS General Reference*.
1285
1281
  # @return [String]
1286
1282
  #
1287
1283
  # @!attribute [rw] max_results
@@ -1338,16 +1334,16 @@ module Aws::SSOAdmin
1338
1334
  # }
1339
1335
  #
1340
1336
  # @!attribute [rw] instance_arn
1341
- # The ARN of the SSO instance under which the operation will be
1342
- # executed. For more information about ARNs, see [Amazon Resource
1343
- # Names (ARNs) and Amazon Web Services Service
1337
+ # The ARN of the IAM Identity Center instance under which the
1338
+ # operation will be executed. For more information about ARNs, see
1339
+ # [Amazon Resource Names (ARNs) and AWS Service
1344
1340
  # Namespaces](/general/latest/gr/aws-arns-and-namespaces.html) in the
1345
- # *Amazon Web Services General Reference*.
1341
+ # *AWS General Reference*.
1346
1342
  # @return [String]
1347
1343
  #
1348
1344
  # @!attribute [rw] account_id
1349
- # The identifier of the Amazon Web Services account from which to list
1350
- # the assignments.
1345
+ # The identifier of the AWS account from which to list the
1346
+ # assignments.
1351
1347
  # @return [String]
1352
1348
  #
1353
1349
  # @!attribute [rw] permission_set_arn
@@ -1376,8 +1372,8 @@ module Aws::SSOAdmin
1376
1372
  end
1377
1373
 
1378
1374
  # @!attribute [rw] account_assignments
1379
- # The list of assignments that match the input Amazon Web Services
1380
- # account and permission set.
1375
+ # The list of assignments that match the input AWS account and
1376
+ # permission set.
1381
1377
  # @return [Array<Types::AccountAssignment>]
1382
1378
  #
1383
1379
  # @!attribute [rw] next_token
@@ -1406,21 +1402,20 @@ module Aws::SSOAdmin
1406
1402
  # }
1407
1403
  #
1408
1404
  # @!attribute [rw] instance_arn
1409
- # The ARN of the SSO instance under which the operation will be
1410
- # executed. For more information about ARNs, see [Amazon Resource
1411
- # Names (ARNs) and Amazon Web Services Service
1405
+ # The ARN of the IAM Identity Center instance under which the
1406
+ # operation will be executed. For more information about ARNs, see
1407
+ # [Amazon Resource Names (ARNs) and AWS Service
1412
1408
  # Namespaces](/general/latest/gr/aws-arns-and-namespaces.html) in the
1413
- # *Amazon Web Services General Reference*.
1409
+ # *AWS General Reference*.
1414
1410
  # @return [String]
1415
1411
  #
1416
1412
  # @!attribute [rw] permission_set_arn
1417
- # The ARN of the PermissionSet from which the associated Amazon Web
1418
- # Services accounts will be listed.
1413
+ # The ARN of the PermissionSet from which the associated AWS accounts
1414
+ # will be listed.
1419
1415
  # @return [String]
1420
1416
  #
1421
1417
  # @!attribute [rw] provisioning_status
1422
- # The permission set provisioning status for an Amazon Web Services
1423
- # account.
1418
+ # The permission set provisioning status for an AWS account.
1424
1419
  # @return [String]
1425
1420
  #
1426
1421
  # @!attribute [rw] max_results
@@ -1445,7 +1440,7 @@ module Aws::SSOAdmin
1445
1440
  end
1446
1441
 
1447
1442
  # @!attribute [rw] account_ids
1448
- # The list of Amazon Web Services `AccountIds`.
1443
+ # The list of AWS `AccountIds`.
1449
1444
  # @return [Array<String>]
1450
1445
  #
1451
1446
  # @!attribute [rw] next_token
@@ -1473,8 +1468,8 @@ module Aws::SSOAdmin
1473
1468
  # }
1474
1469
  #
1475
1470
  # @!attribute [rw] instance_arn
1476
- # The ARN of the SSO instance under which the operation will be
1477
- # executed.
1471
+ # The ARN of the IAM Identity Center instance under which the
1472
+ # operation will be executed.
1478
1473
  # @return [String]
1479
1474
  #
1480
1475
  # @!attribute [rw] permission_set_arn
@@ -1502,8 +1497,8 @@ module Aws::SSOAdmin
1502
1497
  end
1503
1498
 
1504
1499
  # @!attribute [rw] customer_managed_policy_references
1505
- # Specifies the names and paths of the IAM customer managed policies
1506
- # that you have attached to your permission set.
1500
+ # Specifies the names and paths of the customer managed policies that
1501
+ # you have attached to your permission set.
1507
1502
  # @return [Array<Types::CustomerManagedPolicyReference>]
1508
1503
  #
1509
1504
  # @!attribute [rw] next_token
@@ -1547,7 +1542,8 @@ module Aws::SSOAdmin
1547
1542
  end
1548
1543
 
1549
1544
  # @!attribute [rw] instances
1550
- # Lists the SSO instances that the caller has access to.
1545
+ # Lists the IAM Identity Center instances that the caller has access
1546
+ # to.
1551
1547
  # @return [Array<Types::InstanceMetadata>]
1552
1548
  #
1553
1549
  # @!attribute [rw] next_token
@@ -1575,11 +1571,11 @@ module Aws::SSOAdmin
1575
1571
  # }
1576
1572
  #
1577
1573
  # @!attribute [rw] instance_arn
1578
- # The ARN of the SSO instance under which the operation will be
1579
- # executed. For more information about ARNs, see [Amazon Resource
1580
- # Names (ARNs) and Amazon Web Services Service
1574
+ # The ARN of the IAM Identity Center instance under which the
1575
+ # operation will be executed. For more information about ARNs, see
1576
+ # [Amazon Resource Names (ARNs) and AWS Service
1581
1577
  # Namespaces](/general/latest/gr/aws-arns-and-namespaces.html) in the
1582
- # *Amazon Web Services General Reference*.
1578
+ # *AWS General Reference*.
1583
1579
  # @return [String]
1584
1580
  #
1585
1581
  # @!attribute [rw] permission_set_arn
@@ -1607,7 +1603,7 @@ module Aws::SSOAdmin
1607
1603
  end
1608
1604
 
1609
1605
  # @!attribute [rw] attached_managed_policies
1610
- # The array of the AttachedManagedPolicy data type object.
1606
+ # An array of the AttachedManagedPolicy data type object.
1611
1607
  # @return [Array<Types::AttachedManagedPolicy>]
1612
1608
  #
1613
1609
  # @!attribute [rw] next_token
@@ -1637,11 +1633,11 @@ module Aws::SSOAdmin
1637
1633
  # }
1638
1634
  #
1639
1635
  # @!attribute [rw] instance_arn
1640
- # The ARN of the SSO instance under which the operation will be
1641
- # executed. For more information about ARNs, see [Amazon Resource
1642
- # Names (ARNs) and Amazon Web Services Service
1636
+ # The ARN of the IAM Identity Center instance under which the
1637
+ # operation will be executed. For more information about ARNs, see
1638
+ # [Amazon Resource Names (ARNs) and AWS Service
1643
1639
  # Namespaces](/general/latest/gr/aws-arns-and-namespaces.html) in the
1644
- # *Amazon Web Services General Reference*.
1640
+ # *AWS General Reference*.
1645
1641
  # @return [String]
1646
1642
  #
1647
1643
  # @!attribute [rw] max_results
@@ -1698,16 +1694,16 @@ module Aws::SSOAdmin
1698
1694
  # }
1699
1695
  #
1700
1696
  # @!attribute [rw] instance_arn
1701
- # The ARN of the SSO instance under which the operation will be
1702
- # executed. For more information about ARNs, see [Amazon Resource
1703
- # Names (ARNs) and Amazon Web Services Service
1697
+ # The ARN of the IAM Identity Center instance under which the
1698
+ # operation will be executed. For more information about ARNs, see
1699
+ # [Amazon Resource Names (ARNs) and AWS Service
1704
1700
  # Namespaces](/general/latest/gr/aws-arns-and-namespaces.html) in the
1705
- # *Amazon Web Services General Reference*.
1701
+ # *AWS General Reference*.
1706
1702
  # @return [String]
1707
1703
  #
1708
1704
  # @!attribute [rw] account_id
1709
- # The identifier of the Amazon Web Services account from which to list
1710
- # the assignments.
1705
+ # The identifier of the AWS account from which to list the
1706
+ # assignments.
1711
1707
  # @return [String]
1712
1708
  #
1713
1709
  # @!attribute [rw] provisioning_status
@@ -1741,7 +1737,7 @@ module Aws::SSOAdmin
1741
1737
  # @return [String]
1742
1738
  #
1743
1739
  # @!attribute [rw] permission_sets
1744
- # Defines the level of access that an Amazon Web Services account has.
1740
+ # Defines the level of access that an AWS account has.
1745
1741
  # @return [Array<String>]
1746
1742
  #
1747
1743
  # @see http://docs.aws.amazon.com/goto/WebAPI/sso-admin-2020-07-20/ListPermissionSetsProvisionedToAccountResponse AWS API Documentation
@@ -1763,11 +1759,11 @@ module Aws::SSOAdmin
1763
1759
  # }
1764
1760
  #
1765
1761
  # @!attribute [rw] instance_arn
1766
- # The ARN of the SSO instance under which the operation will be
1767
- # executed. For more information about ARNs, see [Amazon Resource
1768
- # Names (ARNs) and Amazon Web Services Service
1762
+ # The ARN of the IAM Identity Center instance under which the
1763
+ # operation will be executed. For more information about ARNs, see
1764
+ # [Amazon Resource Names (ARNs) and AWS Service
1769
1765
  # Namespaces](/general/latest/gr/aws-arns-and-namespaces.html) in the
1770
- # *Amazon Web Services General Reference*.
1766
+ # *AWS General Reference*.
1771
1767
  # @return [String]
1772
1768
  #
1773
1769
  # @!attribute [rw] next_token
@@ -1790,7 +1786,7 @@ module Aws::SSOAdmin
1790
1786
  end
1791
1787
 
1792
1788
  # @!attribute [rw] permission_sets
1793
- # Defines the level of access on an Amazon Web Services account.
1789
+ # Defines the level of access on an AWS account.
1794
1790
  # @return [Array<String>]
1795
1791
  #
1796
1792
  # @!attribute [rw] next_token
@@ -1817,11 +1813,11 @@ module Aws::SSOAdmin
1817
1813
  # }
1818
1814
  #
1819
1815
  # @!attribute [rw] instance_arn
1820
- # The ARN of the SSO instance under which the operation will be
1821
- # executed. For more information about ARNs, see [Amazon Resource
1822
- # Names (ARNs) and Amazon Web Services Service
1816
+ # The ARN of the IAM Identity Center instance under which the
1817
+ # operation will be executed. For more information about ARNs, see
1818
+ # [Amazon Resource Names (ARNs) and AWS Service
1823
1819
  # Namespaces](/general/latest/gr/aws-arns-and-namespaces.html) in the
1824
- # *Amazon Web Services General Reference*.
1820
+ # *AWS General Reference*.
1825
1821
  # @return [String]
1826
1822
  #
1827
1823
  # @!attribute [rw] resource_arn
@@ -1890,9 +1886,9 @@ module Aws::SSOAdmin
1890
1886
  #
1891
1887
  # @!attribute [rw] permission_set_arn
1892
1888
  # The ARN of the permission set. For more information about ARNs, see
1893
- # [Amazon Resource Names (ARNs) and Amazon Web Services Service
1889
+ # [Amazon Resource Names (ARNs) and AWS Service
1894
1890
  # Namespaces](/general/latest/gr/aws-arns-and-namespaces.html) in the
1895
- # *Amazon Web Services General Reference*.
1891
+ # *AWS General Reference*.
1896
1892
  # @return [String]
1897
1893
  #
1898
1894
  # @!attribute [rw] description
@@ -1939,16 +1935,15 @@ module Aws::SSOAdmin
1939
1935
  # @return [String]
1940
1936
  #
1941
1937
  # @!attribute [rw] account_id
1942
- # The identifier of the Amazon Web Services account from which to list
1943
- # the assignments.
1938
+ # The identifier of the AWS account from which to list the
1939
+ # assignments.
1944
1940
  # @return [String]
1945
1941
  #
1946
1942
  # @!attribute [rw] permission_set_arn
1947
1943
  # The ARN of the permission set that is being provisioned. For more
1948
- # information about ARNs, see [Amazon Resource Names (ARNs) and Amazon
1949
- # Web Services Service
1950
- # Namespaces](/general/latest/gr/aws-arns-and-namespaces.html) in the
1951
- # *Amazon Web Services General Reference*.
1944
+ # information about ARNs, see [Amazon Resource Names (ARNs) and AWS
1945
+ # Service Namespaces](/general/latest/gr/aws-arns-and-namespaces.html)
1946
+ # in the *AWS General Reference*.
1952
1947
  # @return [String]
1953
1948
  #
1954
1949
  # @!attribute [rw] failure_reason
@@ -1998,21 +1993,19 @@ module Aws::SSOAdmin
1998
1993
  include Aws::Structure
1999
1994
  end
2000
1995
 
2001
- # Specifies the configuration of the Amazon Web Services managed or
2002
- # customer managed policy that you want to set as a permissions
2003
- # boundary. Specify either `CustomerManagedPolicyReference` to use the
2004
- # name and path of a customer managed policy, or `ManagedPolicyArn` to
2005
- # use the ARN of an Amazon Web Services managed IAM policy. A
2006
- # permissions boundary represents the maximum permissions that any
2007
- # policy can grant your role. For more information, see [Permissions
2008
- # boundaries for IAM entities][1] in the *Identity and Access Management
2009
- # User Guide*.
1996
+ # Specifies the configuration of the AWS managed or customer managed
1997
+ # policy that you want to set as a permissions boundary. Specify either
1998
+ # `CustomerManagedPolicyReference` to use the name and path of a
1999
+ # customer managed policy, or `ManagedPolicyArn` to use the ARN of an
2000
+ # AWS managed policy. A permissions boundary represents the maximum
2001
+ # permissions that any policy can grant your role. For more information,
2002
+ # see [Permissions boundaries for IAM entities][1] in the *IAM User
2003
+ # Guide*.
2010
2004
  #
2011
- # Policies used as permissions boundaries do not provide permissions.
2005
+ # Policies used as permissions boundaries don't provide permissions.
2012
2006
  # You must also attach an IAM policy to the role. To learn how the
2013
2007
  # effective permissions for a role are evaluated, see [IAM JSON policy
2014
- # evaluation logic][2] in the *Identity and Access Management User
2015
- # Guide*.
2008
+ # evaluation logic][2] in the *IAM User Guide*.
2016
2009
  #
2017
2010
  #
2018
2011
  #
@@ -2031,15 +2024,14 @@ module Aws::SSOAdmin
2031
2024
  # }
2032
2025
  #
2033
2026
  # @!attribute [rw] customer_managed_policy_reference
2034
- # Specifies the name and path of the IAM customer managed policy. You
2035
- # must have an IAM policy that matches the name and path in each
2036
- # Amazon Web Services account where you want to deploy your permission
2037
- # set.
2027
+ # Specifies the name and path of a customer managed policy. You must
2028
+ # have an IAM policy that matches the name and path in each AWS
2029
+ # account where you want to deploy your permission set.
2038
2030
  # @return [Types::CustomerManagedPolicyReference]
2039
2031
  #
2040
2032
  # @!attribute [rw] managed_policy_arn
2041
- # The Amazon Web Services managed policy ARN that you want to attach
2042
- # to a permission set as a permissions boundary.
2033
+ # The AWS managed policy ARN that you want to attach to a permission
2034
+ # set as a permissions boundary.
2043
2035
  # @return [String]
2044
2036
  #
2045
2037
  # @see http://docs.aws.amazon.com/goto/WebAPI/sso-admin-2020-07-20/PermissionsBoundary AWS API Documentation
@@ -2062,11 +2054,11 @@ module Aws::SSOAdmin
2062
2054
  # }
2063
2055
  #
2064
2056
  # @!attribute [rw] instance_arn
2065
- # The ARN of the SSO instance under which the operation will be
2066
- # executed. For more information about ARNs, see [Amazon Resource
2067
- # Names (ARNs) and Amazon Web Services Service
2057
+ # The ARN of the IAM Identity Center instance under which the
2058
+ # operation will be executed. For more information about ARNs, see
2059
+ # [Amazon Resource Names (ARNs) and AWS Service
2068
2060
  # Namespaces](/general/latest/gr/aws-arns-and-namespaces.html) in the
2069
- # *Amazon Web Services General Reference*.
2061
+ # *AWS General Reference*.
2070
2062
  # @return [String]
2071
2063
  #
2072
2064
  # @!attribute [rw] permission_set_arn
@@ -2074,8 +2066,8 @@ module Aws::SSOAdmin
2074
2066
  # @return [String]
2075
2067
  #
2076
2068
  # @!attribute [rw] target_id
2077
- # TargetID is an Amazon Web Services account identifier, typically a
2078
- # 10-12 digit string (For example, 123456789012).
2069
+ # TargetID is an AWS account identifier, typically a 10-12 digit
2070
+ # string (For example, 123456789012).
2079
2071
  # @return [String]
2080
2072
  #
2081
2073
  # @!attribute [rw] target_type
@@ -2115,11 +2107,11 @@ module Aws::SSOAdmin
2115
2107
  # }
2116
2108
  #
2117
2109
  # @!attribute [rw] instance_arn
2118
- # The ARN of the SSO instance under which the operation will be
2119
- # executed. For more information about ARNs, see [Amazon Resource
2120
- # Names (ARNs) and Amazon Web Services Service
2110
+ # The ARN of the IAM Identity Center instance under which the
2111
+ # operation will be executed. For more information about ARNs, see
2112
+ # [Amazon Resource Names (ARNs) and AWS Service
2121
2113
  # Namespaces](/general/latest/gr/aws-arns-and-namespaces.html) in the
2122
- # *Amazon Web Services General Reference*.
2114
+ # *AWS General Reference*.
2123
2115
  # @return [String]
2124
2116
  #
2125
2117
  # @!attribute [rw] permission_set_arn
@@ -2127,7 +2119,7 @@ module Aws::SSOAdmin
2127
2119
  # @return [String]
2128
2120
  #
2129
2121
  # @!attribute [rw] inline_policy
2130
- # The IAM inline policy to attach to a PermissionSet.
2122
+ # The inline policy to attach to a PermissionSet.
2131
2123
  # @return [String]
2132
2124
  #
2133
2125
  # @see http://docs.aws.amazon.com/goto/WebAPI/sso-admin-2020-07-20/PutInlinePolicyToPermissionSetRequest AWS API Documentation
@@ -2160,8 +2152,8 @@ module Aws::SSOAdmin
2160
2152
  # }
2161
2153
  #
2162
2154
  # @!attribute [rw] instance_arn
2163
- # The ARN of the SSO instance under which the operation will be
2164
- # executed.
2155
+ # The ARN of the IAM Identity Center instance under which the
2156
+ # operation will be executed.
2165
2157
  # @return [String]
2166
2158
  #
2167
2159
  # @!attribute [rw] permission_set_arn
@@ -2216,8 +2208,7 @@ module Aws::SSOAdmin
2216
2208
 
2217
2209
  # A set of key-value pairs that are used to manage the resource. Tags
2218
2210
  # can only be applied to permission sets and cannot be applied to
2219
- # corresponding roles that Amazon Web Services SSO creates in Amazon Web
2220
- # Services accounts.
2211
+ # corresponding roles that IAM Identity Center creates in AWS accounts.
2221
2212
  #
2222
2213
  # @note When making an API call, you may pass Tag
2223
2214
  # data as a hash:
@@ -2259,11 +2250,11 @@ module Aws::SSOAdmin
2259
2250
  # }
2260
2251
  #
2261
2252
  # @!attribute [rw] instance_arn
2262
- # The ARN of the SSO instance under which the operation will be
2263
- # executed. For more information about ARNs, see [Amazon Resource
2264
- # Names (ARNs) and Amazon Web Services Service
2253
+ # The ARN of the IAM Identity Center instance under which the
2254
+ # operation will be executed. For more information about ARNs, see
2255
+ # [Amazon Resource Names (ARNs) and AWS Service
2265
2256
  # Namespaces](/general/latest/gr/aws-arns-and-namespaces.html) in the
2266
- # *Amazon Web Services General Reference*.
2257
+ # *AWS General Reference*.
2267
2258
  # @return [String]
2268
2259
  #
2269
2260
  # @!attribute [rw] resource_arn
@@ -2312,11 +2303,11 @@ module Aws::SSOAdmin
2312
2303
  # }
2313
2304
  #
2314
2305
  # @!attribute [rw] instance_arn
2315
- # The ARN of the SSO instance under which the operation will be
2316
- # executed. For more information about ARNs, see [Amazon Resource
2317
- # Names (ARNs) and Amazon Web Services Service
2306
+ # The ARN of the IAM Identity Center instance under which the
2307
+ # operation will be executed. For more information about ARNs, see
2308
+ # [Amazon Resource Names (ARNs) and AWS Service
2318
2309
  # Namespaces](/general/latest/gr/aws-arns-and-namespaces.html) in the
2319
- # *Amazon Web Services General Reference*.
2310
+ # *AWS General Reference*.
2320
2311
  # @return [String]
2321
2312
  #
2322
2313
  # @!attribute [rw] resource_arn
@@ -2359,8 +2350,8 @@ module Aws::SSOAdmin
2359
2350
  # }
2360
2351
  #
2361
2352
  # @!attribute [rw] instance_arn
2362
- # The ARN of the SSO instance under which the operation will be
2363
- # executed.
2353
+ # The ARN of the IAM Identity Center instance under which the
2354
+ # operation will be executed.
2364
2355
  # @return [String]
2365
2356
  #
2366
2357
  # @!attribute [rw] instance_access_control_attribute_configuration
@@ -2392,11 +2383,11 @@ module Aws::SSOAdmin
2392
2383
  # }
2393
2384
  #
2394
2385
  # @!attribute [rw] instance_arn
2395
- # The ARN of the SSO instance under which the operation will be
2396
- # executed. For more information about ARNs, see [Amazon Resource
2397
- # Names (ARNs) and Amazon Web Services Service
2386
+ # The ARN of the IAM Identity Center instance under which the
2387
+ # operation will be executed. For more information about ARNs, see
2388
+ # [Amazon Resource Names (ARNs) and AWS Service
2398
2389
  # Namespaces](/general/latest/gr/aws-arns-and-namespaces.html) in the
2399
- # *Amazon Web Services General Reference*.
2390
+ # *AWS General Reference*.
2400
2391
  # @return [String]
2401
2392
  #
2402
2393
  # @!attribute [rw] permission_set_arn